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REMARKS 

The application has been reviewed in light of the Office Action dated January 4, 2005. 
Claims 1-30 are pending in this application, with claims 1, 12, 18, 23 and 28 being in 
independent form. Claims 1,3,9, 12-14, 16-19, 22, 23 and 27-29 have been amended 
hereby. It is submitted that no new matter has been added and no new issues have been raised 
by the present Amendment. 

Claims 12-16 were rejected under 35 U.S.C. §102(e) as allegedly anticipated by U.S. 
Patent Number 6,178,511 (Cohen et al.). Applicants have carefully considered the Examiner's 
comments and the cited art, and respectfully submit independent claim 12 is patentably distinct 
from the cited art, for at least the following reasons. 

Independent claim 12 relates to a method for a user to access a plurality of resources 
having different authorization requirements in an electronic device in communication with a 
network. The network stores a plurality of unique universal user identifiers with the plurality 
of resources. The user accesses the network via a user electronic device. The user provides 
identifying data to the network. The network retrieves a unique universal user identifier for 
the user in a repository of unique universal user identifiers. The network stores the unique 
universal user identifier on a storage device, the unique universal user identifier indicating the 
user is authenticated. The user accesses one of the plurality of resources, wherein the unique 
universal user identifier is transmitted to the one of the plurality of resources to identify the 
user such that the user can access authorized resources without providing additional identifying 
information and the user is denied access to unauthorized resources. 

Cohen et al. relates to a single sign-on mechanism to allow a user to access multiple 
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target resources. The user remembers one password to log into a PKM server. After the user 
is authenticated on the PKM server, a logon coordinator recalls a user-defined "target" where 
a user ID and password pair specific to the desired target resource has been stored. The login 
coordinator then uses the recalled target to login to the corresponding target resource. 

In the Office Action, it is alleged that Cohen et al. teaches "said network retrieving a 
unique user identifier for said user in a repository of unique user identifiers" at col. 6, line 19 
- col. 7, line 20, col. 2 lines 33 - 41 and col. 5, lines 16 - 44. However, the cited portions 
of Cohen et al. relate to the use of a personal key manager that utilizes stored user 
ID/password pairs, or targets, that are used by a logon coordinator to authenticate the user on a 
corresponding target resource. There is such a target for each target resource that the user 
may gain access to. According to Cohen et al. at col. 5, line 50-54, "the user creates a target 
in PKM corresponding to each real target to which the user can logon, and the user may create 
as many (or as few) targets as the capacity of a specific PKM implementation allows (or the 
user desires)." 

As described above, claim 12 utilizes a "unique universal user identifier" to access 

authorized resources. Cohen et al. uses stored user ID/password pairs, or targets, that are 

specific to a given target resource. Cohen et al. appears to embody the storing of multiple 

identifiers throughout the enterprise network for the same user. The instant Specification, 

beginning at the last paragraph of page 4 points out a problem with a system such as that 

described in Cohen et al. : 

As a result of storing multiple identifiers throughout the enterprise 
network for the same user, no means exists for drawing any correlation between 
a user accessing one application and the same user accessing a different 
application in the enterprise network. Such a correlation is useful for sharing 
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authentication and authorization data, not only within the enterprise network, 
but also for affiliated services available from a business partner's web site. 

Because Cohen et al. neither teaches nor suggests the use of a unique universal user 
identifier, Cohen fails to teach or suggest "said network retrieving a unique universal user 
identifier for said user in a repository of unique universal user identifiers," "said network 
storing said unique universal user identifier on a storage device, said unique universal user 
identifier indicating said user is authenticated," and "said user accessing one of said plurality 
of resources to identify said user such that said user can access authorized resources without 
providing additional identifying information and said user is denied access to unauthorized 
resources" as claimed in claim 12. 

Therefore, independent claim 12 is believed to be patentably distinct from the cited art. 

Independent claims 1, 18, 23, 28 were rejected under 35 U.S.C. §103(a) as allegedly 
obvious in view of U.S. Patent Number 6,178,511 (Cohen et al.) and U.S. Patent Application 
Publication Number 2002/0161901 (Weissman). 

Weissman relates to the use of a portal web site. A user may log into the portal web 

site and allow the portal web site to log the user into related web sites. As with Cohen et al., 

Weissman appears to utilize multiple identifiers and does not appear to teach or suggest the use 

of unique universal user identifiers. Evidence of this may be seen at page 2, paragraph [0019]: 

The portal web site may store the logon information, which may include 
a user name and password and a definition of logon messages to be used to 
effect [sic] the logging on of the user to the identified web site. The portal web 
site uses the definition of logon messages to control the logging on of the user to 
the identified web site in such a way that the logon appears to the identified web 
site as being performed by the user, and that the identified web site does not 
need to be modified to accommodate the logging on of the user via the portal 
web site. 
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Because neither Cohen et al. nor Weissmann, individually or together, teach or suggest 
the use of unique universal user identifiers, Cohen et al. and Weissmann fail to teach or 
suggest "retrieving a user identifier representing said user upon locating said information of 
said user," "storing at least said unique universal user identifier in a data packet," or 
"retrieving an authorization datum associated with said user, based at least partially on said 
unique universal user identifier, from said resource" as claimed in claim 1. 

Moreover, independent claims, 18, 23, 28, as amended, each make use of unique 
universal user identifiers. Therefore, each of the independent claims is patentably distinct over 
the cited art for at least this reason. 

The Office is hereby authorized to charge any additional fees that may be required in 
connection with this amendment and to credit any overpayment to our Deposit Account No. 



If a petition for an extension of time is required to make this response timely, this paper 
should be considered to be such a petition, and the Commissioner is authorized to charge the 
requisite fees to our Deposit Account No. 03-3125. 

If a telephone interview could advance the prosecution of this application, the Examiner 
is respectfully requested to call the undersigned attorney. 

Entry of this amendment and allowance of this application are respectfully requested. 



03-3125. 
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